For general information about LAN and WAN ports, visit this article.
What is port forwarding?
Port forwarding, also known as port mapping, allows you to specify which port certain internet traffic should go to after it passes through a device such as a router or Winston.
Winston already keeps ports 80 and 443 open, since they are used for typical internet traffic. Winston does not, on its own, open additional ports to prevent security vulnerabilities. If a device on your network requires access to additional ports, you have the option to open additional ports using port forwarding.
With Winston, you will identify the incoming (WAN) port from which you want to forward internet traffic, and the IP address and port on the LAN side to which you want to forward that internet activitiy.
When do you need to use port forwarding?
Port forwarding is required when a device or application on your network needs any ports in addition to 80 or 443 open to access services, per that manufacturer’s requirements.
Without forwarding for other ports, you may find that those devices won’t work at all or have limited capabilities.
Devices that typically need port forwarding include, for example, web servers and security camera DVRs that need to be accessed from outside the network, and gaming equipment.
Determining which ports to forward
Consult your device’s manufacturer for the port(s) that are required for the device to function. Typically, a port number from the WAN side is forwarded to the same port on the LAN side.
Using Winston’s Port Forwarding
While on your Winston network, visit http://my.winstonprivacy.com/firewall and click Create Rule for each port that needs forwarding:
Your device’s manufacturer’s requirements will specify TCP and/or UDP.
If both TCP and UDP are required, create two separate rules.
This is the IP address of the device for which you are forwarding the port.
Consult your device’s owner’s manual for instructions on accessing its network settings to determine its IP address.
Your device’s manufacturer’s requirements will specify the LAN port that is required, unless you’ve assigned it, yourself.
This is usually the same as the LAN port, as specified by your manufacturer’s requirements.
For advanced networks, this could be random other than ports 80, 443, or any other port used in other port forwarding rules.
Note: Routers between Winston and any device that require port forwarding also must have port forwarding enabled (following its manufacturer’s instructions) or be in bridge mode. If the router was already configured for the device prior to installing Winston in line, no additional changes are required.